0012251: User without roadmap update privilege cannot assign or update bugs at all

ID	Project	Category	View Status	Date Submitted	Last Update
0012251	mantisbt	other	public	2010-08-12 05:43	2011-08-05 02:20

Reporter	klkl	Assigned To	dhx
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	closed	Resolution	duplicate
Product Version	git trunk

Summary	0012251: User without roadmap update privilege cannot assign or update bugs at all
Description	BugData::__set() requires privileges for updating target_version, even if user didn't change value of target_version. case 'target_version': if ( !$this->loading ) { Only set target_version if user has access to do so `if( !access_has_project_level( config_get( 'roadmap_update_threshold' ) ) ) { trigger_error( ERROR_ACCESS_DENIED, ERROR ); } }`
Additional Information	I suggest replacing `trigger_error()` with `return` here (just in case code elsewhere relies on this check) and trigger permission errors on pages that update the bug, like it's done with other permissions.
Tags	No tags attached.

Only set target_version if user has access to do so

dhx 2010-08-12 09:13 reporter ~0026296	Thanks for the report. I agree with your suggestion to remove the access check from bug_api.php (it doesn't belong there). Issue 0012215 is already tracking this matter so please continue following it there instead.